EUVD-2022-3952

🗓️ 03 Oct 2025 20:07:09Reported by EUVDType

RandomPasswordGenerator gem uses Kernel#rand, risking predictable password generation in Ruby.

Reporter	Title	Published	Views	Family All 12
Circl	CVE-2019-25061	18 May 202214:28	–	circl
CNNVD	OmniAuth Ruby gem 安全漏洞	18 May 202200:00	–	cnnvd
CVE	CVE-2019-25061	18 May 202205:49	–	cve
Cvelist	CVE-2019-25061	18 May 202205:49	–	cvelist
Github Security Blog	Insecure PRNG use in random_password_generator	19 May 202200:00	–	github
NVD	CVE-2019-25061	18 May 202211:15	–	nvd
OSV	GHSA-GGFX-H9XJ-5V9C Insecure PRNG use in random_password_generator	19 May 202200:00	–	osv
Prion	Design/Logic Flaw	18 May 202211:15	–	prion
RedhatCVE	CVE-2019-25061	22 May 202508:35	–	redhatcve
RubySec	Insecure PRNG use in random_password_generator	19 May 202200:00	–	rubygems

[
  {
    "enisaIdVendor": [
      {
        "id": "c22e6a23-466f-3444-9245-e6bdbb95e58b",
        "vendor": {
          "name": "n/a"
        }
      }
    ],
    "enisaIdProduct": [
      {
        "id": "f3ed5a94-e4f0-3cf2-8553-ff11d6a5cec9",
        "product": {
          "name": "n/a"
        },
        "product_version": "n/a"
      }
    ]
  }
]

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2019-25061
github	www.github.com/bvsatyaram/random_password_generator/pull/1
github	www.github.com/bvsatyaram/random_password_generator
github	www.github.com/bvsatyaram/random_password_generator/blob/2855e8d7d8803dbb580ddd6cf13846394eb4530e/lib/random_password_generator.rb
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/random_password_generator/CVE-2019-25061.yml
ruby-doc	www.ruby-doc.org/core-3.1.2/Random.html
stackoverflow	www.stackoverflow.com/questions/42170239/security-of-rand-in-ruby-compared-to-other-methods/42170560

03 Oct 2025 20:07Current

7.5High risk

Vulners AI Score7.5

CVSS 3.17.5

CVSS 25

EPSS0.00338